Network Security Architect

As a Network Security Architect, you will be the visionary and lead designer for our secure network infrastructure. You will design, build, and oversee the implementation of security systems that protect our nationwide ISP backbone, data centers, and customer-facing services. This role requires a deep understanding of BGP security, DDoS mitigation at scale, and the integration of security into high-throughput transport networks. Responsibilities: Architectural Design: Develop and maintain the security blueprint for the ISP core, edge, and access networks. DDoS Mitigation: Design and optimize multi-layered DDoS protection strategies using scrubbing centers, flow-based monitoring (NetFlow/SFlow), and RTBH (Remote Triggered Black Hole) filtering. Infrastructure Security: Hardening of critical network elements (routers, switches, OLTs) and implementing robust AAA (Authentication, Authorization, and Accounting) frameworks. BGP & Routing Security: Lead the implementation of RPKI (Resource Public Key Infrastructure), BGPsec, and peering security best practices to prevent route hijacking. Automation & Orchestration: Drive "Security as Code" by using Python, Ansible, or Terraform to automate security policy deployments across thousands of nodes. Compliance & Standards: Ensure the network meets industry standards such as NIST, ISO 27001, and regulatory requirements (e.g., CALEA, GDPR). Incident Escalation: Act as a Tier 4 subject matter expert during major security breaches or sophisticated network attacks. Qualifications: Experience: 8+ years in network engineering with at least 4 years focused specifically on security architecture in a Service Provider or large Enterprise environment. Education: Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or equivalent experience. Certifications: Highly preferred: CCIE Security, JNCIE-SEC, CISSP-ISSAP, or GSEC. Soft Skills: Ability to translate complex security risks into business terms for executive leadership. Our Commitments: Adaptive Mindset: We meet change head‑on to build the capabilities we need now. We take personal ownership of our professional development to keep pace with change and actively drive it. Collective Impact: We treat innovation as a team sport, working powerfully together to create extraordinary impact. We collaborate openly and with a shared purpose and amplify our unique human strengths to solve complex challenges that technology alone cannot. Customer Ownership: We own our customers’ success, whether an internal stakeholder or an external client. We take full accountability, anticipate their needs and create smooth experiences to build trust with every touchpoint. In an automated world, personal ownership is GTT’s competitive edge. EEO Statement (US) GTT provides equal employment opportunities (EEO) to all employees and applicants for employment without regard to race, color, religion, sex, national origin, age, disability, or genetics. In addition to federal law requirements, GTT complies with applicable state and local laws governing non‑discrimination in employment in every location in which the company has facilities. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. GTT expressly prohibits any form of workplace harassment based on race, color, religion, gender, sexual orientation, gender identity or expression, national origin, age, genetic information, disability, or veteran status. Improper interference with the ability of GTT’s employees to perform their job duties may result in discipline up to and including discharge.